Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/yS9Yk9MddmyVhqhfdSXrcaZ4qCA.roa
File: yS9Yk9MddmyVhqhfdSXrcaZ4qCA.roa (raw, json)
Hash identifier: rs44aE40EHixe1iTp0+fpQuXL9WkdydaR1b0f2WGgaI=
Subject key identifier: C9:2F:58:93:D3:1D:76:6C:95:86:A8:5F:75:25:EB:71:A6:78:A8:20
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019EB11C7088157616863DA8A57F6194C491
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/yS9Yk9MddmyVhqhfdSXrcaZ4qCA.roa
Signing time: Wed 10 Jun 2026 10:38:11 +0000
ROA not before: Wed 10 Jun 2026 10:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214682
IP address blocks: 94.20.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:1c:70:88:15:76:16:86:3d:a8:a5:7f:61:94:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jun 10 10:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c92f5893d31d766c9586a85f7525eb71a678a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:63:a4:2a:d7:13:a9:6b:07:b6:1e:32:48:
45:52:9c:18:40:10:2b:61:53:20:72:b8:f5:53:fc:
72:5e:25:9d:d6:4f:ea:fe:d3:47:2d:e0:40:93:9b:
11:87:ba:de:8e:ac:6e:7f:30:86:18:39:ee:80:16:
13:10:a3:43:92:0d:a8:71:bd:9e:e1:45:92:62:c9:
90:3c:7c:c1:3a:f0:cb:26:59:21:44:4f:9b:3f:c2:
54:06:cd:ae:52:78:ec:38:76:17:b9:6b:35:b5:ed:
ae:7d:00:ac:de:9e:89:af:c6:18:a8:38:cf:cf:9c:
59:04:3d:6a:9a:74:6f:c0:ac:47:df:92:33:b5:27:
c8:b4:41:34:7b:e3:df:db:09:52:3f:35:3f:81:4d:
1f:fa:89:82:4f:af:14:33:f6:b8:13:5d:7d:a8:b0:
8d:ba:07:3d:c1:f5:bd:19:26:c1:28:73:7c:6a:36:
4b:80:ea:8b:f8:4c:94:2c:03:b8:06:59:d8:3a:09:
ba:92:c3:6f:93:2b:a5:81:40:b5:69:ac:c3:48:40:
af:df:40:e2:ac:f1:5d:37:eb:03:79:dc:82:6e:53:
55:66:bf:05:1f:90:df:59:44:b9:b0:89:a2:01:76:
c4:f8:73:9c:3b:4e:77:a2:b3:22:28:d6:0c:ac:31:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:58:93:D3:1D:76:6C:95:86:A8:5F:75:25:EB:71:A6:78:A8:20
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/yS9Yk9MddmyVhqhfdSXrcaZ4qCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.20.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8e:71:04:78:70:60:7f:9f:bd:d4:22:5c:b2:59:6f:da:71:
ba:72:0e:6c:93:00:d9:ca:d9:3e:40:c7:fc:da:4a:a8:c5:96:
7e:e4:f4:f5:a5:d3:2b:86:4a:32:96:e6:4e:40:e1:e0:43:ce:
63:1e:57:d7:57:b2:35:48:dc:71:47:c3:2d:8f:55:1b:22:36:
20:82:e0:11:13:8a:76:42:d8:d4:83:da:d4:5c:84:7e:ff:fd:
bb:99:2d:6f:eb:dd:ad:9b:7f:4c:93:69:78:e1:b1:de:7d:db:
34:ca:19:a3:9c:05:33:ba:ad:8e:46:7b:da:89:ae:42:26:f4:
29:c4:00:bd:4c:38:15:68:14:21:e2:ee:28:7d:f2:ad:22:3a:
0f:c3:e5:0e:9c:8a:dd:7c:1a:8b:98:2b:20:51:cf:01:5d:60:
d1:94:93:94:2a:c3:df:3f:4a:09:02:5b:d3:ab:75:b6:45:60:
a3:57:27:4a:45:67:0a:71:01:22:73:71:e2:a8:1f:4f:99:63:
ce:ab:89:af:e7:74:0e:74:01:1e:5f:92:c1:01:c6:f0:ea:e7:
58:8f:d9:09:ee:55:0a:79:5a:7f:f2:3f:c5:d9:3f:18:e5:b2:
3d:99:a2:62:2c:86:98:76:87:9a:97:ff:f0:60:20:22:95:39:
a0:3f:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:42 2026 by rpki-client